 $	subroutine
 $
 $		openssl ts -verify -queryfile 'p1' -in 'p2' -
-			-CAfile [.demoCA]cacert.pem -untrusted tsa_cert1.pem
+			"-CAfile" tsaca.pem -untrusted tsa_cert1.pem
 $		if $severity .ne. 1 then call error
 $		openssl ts -verify -data 'p3' -in 'p2' -
-			-CAfile [.demoCA]cacert.pem -untrusted tsa_cert1.pem
+			"-CAfile" tsaca.pem -untrusted tsa_cert1.pem
 $		if $severity .ne. 1 then call error
 $	endsubroutine
 $
 $ verify_time_stamp_token:
 $	subroutine
 $
-$		# create the token from the response first
+$		! create the token from the response first
 $		openssl ts -reply -in 'p2' -out 'p2'.token -token_out
 $		if $severity .ne. 1 then call error
-$		openssl ts -verify -queryfile 'p1' -in 'p2'.token -token_in \
-			-CAfile [.demoCA]cacert.pem -untrusted tsa_cert1.pem
-$		if $severity .ne. 1 then call error
-$		openssl ts -verify -data 'p3' -in 'p2'.token -token_in \
-			-CAfile [.demoCA]cacert.pem -untrusted tsa_cert1.pem
+$		openssl ts -verify -queryfile 'p1' -in 'p2'.token -token_in -
+			"-CAfile" tsaca.pem -untrusted tsa_cert1.pem
+$		if $severity .ne. 1 then call error
+$		openssl ts -verify -data 'p3' -in 'p2'.token -token_in -
+			"-CAfile" tsaca.pem -untrusted tsa_cert1.pem
 $		if $severity .ne. 1 then call error
 $	endsubroutine
 $

$	call print_response resp2.tsr
$
$	write sys$output "Verifying valid response..."
$	call verify_time_stamp_response req2.tsq resp2.tsr ../testtsa
$
$	write sys$output "Verifying response against wrong request, it should fail..."
$	call verify_time_stamp_response_fail req1.tsq resp2.tsr

$	call create_ca
$
$	write sys$output "Creating tsa_cert1.pem TSA server cert..."
$	call create_tsa_cert 1 "tsa_cert"
$
$	write sys$output "Creating tsa_cert2.pem non-TSA server cert..."
$	call create_tsa_cert 2 "non_tsa_cert"
$
$	write sys$output "Creating req1.req time stamp request for file testtsa..."
$	call create_time_stamp_request1
